Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/EjFbiZGDA6WIMz1ovoIAjdw7-uI.roa
File: EjFbiZGDA6WIMz1ovoIAjdw7-uI.roa (raw, json)
Hash identifier: 1TikV7WQ8DRevDlU8o6A8kwzeh+9+KRkZ6oAoSjQvG4=
Subject key identifier: 12:31:5B:89:91:83:03:A5:88:33:3D:68:BE:82:00:8D:DC:3B:FA:E2
Certificate issuer: /CN=461BC0E516022C3C278FC892420705FEB85668D9
Certificate serial: 09
Authority key identifier: 46:1B:C0:E5:16:02:2C:3C:27:8F:C8:92:42:07:05:FE:B8:56:68:D9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RhvA5RYCLDwnj8iSQgcF_rhWaNk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/EjFbiZGDA6WIMz1ovoIAjdw7-uI.roa
Signing time: Thu 07 Mar 2024 11:18:46 +0000
ROA not before: Thu 07 Mar 2024 11:18:46 +0000
ROA not after: Wed 29 Jan 2025 15:30:22 +0000
asID: 150769
IP address blocks: 157.15.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461BC0E516022C3C278FC892420705FEB85668D9
Validity
Not Before: Mar 7 11:18:46 2024 GMT
Not After : Jan 29 15:30:22 2025 GMT
Subject: CN=12315B89918303A588333D68BE82008DDC3BFAE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:a3:fd:26:bb:1a:7b:e4:07:23:4d:9b:72:
ca:10:1e:84:bf:44:6b:56:0a:d9:7b:03:00:6d:61:
cc:20:da:33:e1:28:93:2c:71:10:84:c4:17:ea:1e:
f4:52:ed:d0:24:ca:8e:39:f3:f9:50:2b:d5:63:87:
60:e2:54:58:1d:b8:f4:d9:67:85:8e:01:30:b9:0a:
c6:f2:35:69:cd:35:89:7b:30:78:d9:47:18:b8:9d:
bd:7b:23:1e:ef:34:94:8c:da:ab:5a:7d:af:3f:b5:
08:fa:8f:db:57:af:da:aa:ab:35:14:85:c8:be:72:
9c:a9:1f:fb:97:4c:e2:96:90:f4:73:7e:f2:a6:8a:
0b:1c:b7:df:b4:7d:67:10:91:7d:49:32:ed:ec:fa:
84:e5:e5:b3:c7:4f:ea:d0:f2:e4:26:a0:b7:75:df:
93:69:c7:12:8b:b9:b4:24:c1:ec:a6:b3:9b:04:71:
d9:dc:50:67:bf:39:fe:99:c6:4c:34:d0:0a:6f:7c:
e5:21:6a:64:25:0c:ee:36:89:a5:e1:5d:7c:f0:97:
cc:d7:23:33:e1:d3:23:a7:15:77:0f:f6:b5:11:a6:
46:45:8a:63:1c:59:7b:e4:d5:f2:65:07:0f:4b:bc:
14:5f:f5:39:cb:d3:cc:c5:4a:aa:90:f8:66:7c:a6:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:5B:89:91:83:03:A5:88:33:3D:68:BE:82:00:8D:DC:3B:FA:E2
X509v3 Authority Key Identifier:
keyid:46:1B:C0:E5:16:02:2C:3C:27:8F:C8:92:42:07:05:FE:B8:56:68:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/RhvA5RYCLDwnj8iSQgcF_rhWaNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RhvA5RYCLDwnj8iSQgcF_rhWaNk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/EjFbiZGDA6WIMz1ovoIAjdw7-uI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:98:2d:3c:87:66:75:a2:65:5f:d0:60:b1:db:0c:af:31:16:
21:f4:50:e8:fd:5b:4a:31:61:13:a9:1a:ab:d6:53:e2:0f:cd:
5d:8e:ff:c5:29:ee:68:93:07:34:e2:f4:f9:42:5f:d8:54:a4:
f0:88:9a:80:1c:7b:de:2f:9b:18:02:5b:f6:8e:4e:c6:cc:b1:
2d:a5:8f:d6:26:95:8f:4c:90:e5:1f:fc:3f:d5:c1:6f:9f:4b:
a0:e0:65:d5:64:b7:ae:96:02:99:df:ab:e0:ed:7d:7c:5c:a6:
c7:ee:9d:d3:02:e6:b9:5d:b5:3e:69:d6:96:3d:47:dc:59:6c:
9a:4a:da:f4:43:12:16:43:68:00:9a:f9:97:45:10:32:b3:f6:
2d:3d:24:32:94:18:c2:34:4e:1e:ec:4e:31:17:ee:2e:98:a8:
99:88:a1:ad:b2:93:be:02:1a:06:e2:76:89:07:7e:cb:88:ea:
d4:48:99:4f:af:ea:0a:8e:44:67:c1:26:3e:c7:07:45:7e:72:
98:79:eb:40:91:f5:5e:8a:c9:50:91:7b:8e:f3:69:d9:86:82:
6c:0c:31:a7:7c:4b:47:17:ce:09:ac:a3:ca:6d:5c:11:e9:65:
21:ca:5d:b5:6f:f8:52:0d:ba:fb:6c:9d:13:45:01:71:76:05:
ac:22:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:05:02 2025 by rpki-client